JP2006115285A - Video distribution system and network camera - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To realize connection to a network camera 1 by a domain name while maintaining high security only by connecting the network camera 1 to the Internet. <P>SOLUTION: When the network camera 1 is connected, since everything from port forward function setting of a router 3 to a sub-domain name allocation request at a DDNS (dynamic domain name system) is automatically performed, a portable telephone 3 can access to the network camera 1 by the domain name. At this time, terminal identification information of a portable telephone 8 for use is automatically acquired and identified, thereby connection using another terminal is disabled, so that high security is realized. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a technique for distributing video captured by a network camera via the Internet.

  In recent years when broadband Internet has become common, network devices such as network cameras have been actively used.

  If a network camera is connected to the Internet and used, video captured by a network camera installed at home or the like can be viewed from a remote location. The network camera is connected to the Internet and has a function of browsing the image being captured by specifying its IP address on a Web browser such as another computer device. In addition, there are various uses such as a monitoring camera-like usage method for confirming whether or not an abnormal situation has occurred at home by viewing home images taken with a network camera at a travel destination.

  In communication over the Internet, a system called DNS (Domain Name System) is generally used. The most basic purpose of the DNS is to provide a function of mutual conversion between a domain name and an IP address. With DNS, an IP address, which is an enumeration of a large number of 32-bit numbers, is converted into a domain name that is easy to understand and remembered by humans, so that the user can easily obtain the target IP without being aware of the IP address. You can access the address.

  By using such a DNS, it is possible to view images captured by a network camera from a remote location.

  By the way, when receiving an image captured by a network camera at home while staying at a remote place, it is necessary to make a transmission request for the image from the receiving destination to the network camera at home.

  When a network camera is connected to the Internet by an individual, the global IP address of the network camera is generally not fixed, and is assigned by an ISP (Internet Service Provider) server at a predetermined timing such as when connecting to the Internet. A dynamic IP address will be used. Therefore, if the global IP address to be used is frequently changed, it becomes difficult to match the global IP address with the domain name when using the network camera.

  At this time, if you obtain a domain name with a fixed IP address, you can always access the network camera with the same domain name, but this requires costs for registration, maintenance, etc. It is rarely used personally.

  Therefore, in order to access the network camera, there is a problem that it is necessary to input a global IP address that is frequently changed and to make a connection request.

  In order to solve such problems, recently, as a name resolution service, there is a method of using a simple DDNS (Dynamic Domain Name System) service provided by a corporate server connected on a network. DDNS solves the problem by associating dynamically changed global IP addresses with subdomain names on the Internet.

  For example, when there is a DDNS server with a domain name “XXX.co.jp”, a subdomain name “xxx.XXX.co.jp” is assigned to a personal network camera. . In this case, when accessing the network camera from the outside, if an FQDN (Fully Qualified Domain Name (hereinafter referred to as an address)) “xxx.xxx.co.jp” is entered in the address input field, “ The DDNS server with the domain name “OO.co.jp” converts the global IP address associated with the subdomain name “xxx.XXX.co.jp” into the global IP address. It becomes possible to connect to the network camera of the address. The network camera can use the domain name instead of the global IP address by dynamically re-registering the global IP address with the DDNS server every time the global IP address assigned to the network camera is changed. .

  Also, at home, a single global IP address is often used by a plurality of network devices such as network cameras and computer devices by using a router. In such a case, in order to use a network camera assigned a private IP address at home with a global IP address via the Internet, the port forward function of the router is used. The port forward function is a function of assigning and transferring access to a specific port number from the Internet side to a network device having a specific private IP address in the home. If this is used, the network camera can be used as a Web server via the Internet. However, in order to use the port forward function, there is a problem in that it takes time and effort to set a router. there were.

  Even when the network camera automatically sends a global IP address and requests the DDNS server to assign a domain name, the network camera stores in advance the subdomain name acquired by the user connecting to the DDNS server. In many cases, the network camera requests the DDNS server to change the global IP address corresponding to the stored subdomain name to the transmitted global IP address.

  However, this method has a problem that it takes time and effort for the user to connect to the DDNS server in advance to obtain the subdomain name and set it in the network camera.

  In order to solve this, for example, the network camera transmits unique device identification information such as its own serial number to the DDNS server and assigns a subdomain name based on the serial number received by the DDNS server. Can be considered.

  However, since the serial number is assigned to the same product with related contents such as a serial number, the subdomain name generated in accordance with the serial number can be easily guessed by a third party. For this reason, there is a security problem in that video and audio are viewed by a third party connected to the network camera using an address including the estimated subdomain name.

  In order to improve the security of the network camera, there is a method in which authentication information such as a user ID and a password is given to the user in advance and authentication is performed using the authentication information when connecting to the network camera. is there.

  However, in recent years, user IDs and passwords are used in various services. Therefore, a user who uses a large number of user IDs and passwords makes the user IDs and passwords easy to predict from their personal information, or has many user IDs and passwords that cannot be stored. There was a problem that the contents could be easily guessed or leaked, such as being left as a memo. In addition, there is a problem that there is a high possibility of leakage of user IDs, passwords, etc., such as the appearance of so-called spyware, which makes the content entered on the keyboard known to third parties via the Internet.

  Therefore, an object of the present invention is to provide a technology that realizes high security for a connection while enabling the connection to the network camera by a domain name only by connecting the network camera to the Internet.

  In order to solve the above problems, the invention of claim 1 is a network camera that transmits its own device identification information and a global IP address when connected to a network, a mobile phone that browses video captured by the network camera, A subdomain name corresponding to the device identification information is assigned to the global IP address transmitted from the network camera, and the device identification information corresponding to the device identification information input by the connected mobile phone is transmitted. A DDNS server that transmits terminal identification information acquired from the mobile phone to the network camera, and the network camera uses the terminal identification information transmitted from the DDNS server. It is characterized by performing connection authentication.

  The invention of claim 2 is the video distribution system according to claim 1, wherein the DDNS server uses the terminal identification information acquired from the mobile phone to notify the completion of the assignment of the subdomain name. It is characterized by being transmitted.

  According to a third aspect of the present invention, a network camera that transmits its own device identification information and a global IP address when connected to a network, a mobile phone that browses images captured by the network camera, and a transmission from the network camera. When the subdomain name corresponding to the device identification information is assigned to the global IP address that has been transmitted, the device identification information corresponding to the device identification information input by the DDNS server and the connected mobile phone is transmitted. A terminal identification server that transmits the terminal identification information acquired from the mobile phone to the network camera, and the network camera uses the terminal identification information transmitted from the terminal identification server. It is characterized by performing connection authentication.

  According to a fourth aspect of the present invention, a network camera that transmits its own device identification information and global IP address when connected to a network, a mobile phone that browses video captured by the network camera, and a transmission from the network camera. A DDNS server that assigns a subdomain name corresponding to the device identification information to the global IP address that has been assigned, and after the assignment of the subdomain name is completed, the network camera connects to the network camera for authentication. After acquiring the terminal identification information from the received mobile phone, connection authentication of the mobile phone is performed using the terminal identification information.

  The invention according to claim 5 is the video distribution system according to any one of claims 1 to 4, wherein the network camera further performs connection authentication using the terminal identification information, Connection authentication is performed using a predetermined user ID and password.

  A sixth aspect of the present invention is the video distribution system according to any one of the first to fifth aspects of the present invention, wherein when the network camera is connected to a router, the port forward function of the router is set. It is characterized by performing.

  The invention according to claim 7 is a network camera that distributes the captured video, and uses the terminal identification information after acquiring the terminal identification information of the mobile phone that has been authenticated by connecting to the network camera. Then, connection authentication of the mobile phone is performed.

  The invention according to claim 8 is the network camera according to claim 7, wherein the network camera further uses a predetermined user ID and password after performing connection authentication using the terminal identification information. It is characterized by performing connection authentication.

  According to the first, third, or fourth aspect of the present invention, the network camera can be connected using the domain name only by connecting the network camera to the network. Since the mobile phone to be connected is authenticated using the terminal identification information, authentication can be performed easily and high security can be realized.

  According to the invention described in claim 2, it is not necessary to perform communication only for notifying only the terminal identification information.

  According to the invention described in claim 5 or claim 8, only authentication using the terminal identification information is performed by performing authentication using the user ID and password in addition to the authentication using the terminal identification information of the mobile phone. Compared with the case of performing the above, higher security can be realized.

  According to the invention described in claim 6, since the port forward function of the router is automatically set only by connecting the network camera, the user can use the mobile phone without setting the router. It becomes possible to connect to the network camera.

  According to the invention described in claim 7, the network camera can acquire the terminal identification information of the mobile phone and perform connection authentication using this.

(First embodiment)
FIG. 1 is a diagram showing a configuration of a video distribution system according to an embodiment of the present invention. As a basic configuration of the video distribution system, a network connected to a network such as the Internet 6 via a modem 4 for performing communication using ADSL (Asymmetric Digital Subscriber Line), FTTH (Fiber To The Home), or the like. A camera 1, a DDNS server 7 connected to the Internet 6 similarly, and a mobile phone 8 for viewing video and audio captured by the network camera 1 are included.

  In the home 5, in addition to the network camera 1, other network devices such as the computer device 2 that perform communication using the network are often used. In this case, the router 3 is connected to the modem 4, and all the network devices 1 and 2 communicate via the Internet 6 via the router 3.

  The network camera 1 has a function of distributing captured video and audio as a Web server. As a result, the user can connect to the network camera 1 using the mobile phone 8 and view the video and audio captured and distributed by the network camera 1 using a Web browser or the like. In addition to this, the network camera 1 performs various operations for realizing a function of requesting the DDNS server 7 to assign a subdomain name, a function of performing connection authentication for the mobile phone 8, and the like. Furthermore, the network camera 1 has a UPnP (Universal Plug & Play) function, and can simply execute each of the above functions at a predetermined timing simply by connecting to the network. Details of these functions and operations will be described later.

  The computer apparatus 2 is an example of a general network apparatus that is connected to the Internet 6 like the network camera 1. Since the network camera 1 can be connected to the LAN using a private IP address via the router 3, in order to view video and audio captured by the network camera 1 and make various settings of the network camera 1. Can also be used.

  The router 3 is a device used to perform routing for using one global IP address assigned on the Internet 6 by a plurality of network devices 1 and 2 in the home 5. A DHCP (Dynamic Host Configuration Protocol) function for assigning private IP addresses to a plurality of network devices 1 and 2 in the home 5, and transmission and reception when these network devices 1 and 2 communicate using the Internet 6 It has a function of mutually converting an IP address related to data into a private IP address in the home 5 and a global IP address on the Internet 6.

  In addition, when there is a connection request from the network device on the Internet 6 for the purpose of viewing captured video and audio to the network camera 1 that operates as a Web server, the router 3 and the network device 1 It has a port forward function for realizing transmission and reception of data with the camera 1. Specifically, a specific port is released from the router 3 to the Internet 6 side, and data is transmitted / received via the port. For example, by assigning the port number 80 to the private IP address of the network camera 1 In response to a connection request from the Internet 6 side specifying a global IP address, the network camera 1 assigned a private IP address in the home 5 can operate as a Web server. With this function, a terminal such as a mobile phone 8 connected to the network camera 1 from the outside via the Internet 6 can view video and audio captured by the network camera 1 using a Web browser or the like. Similarly, if the port numbers 20 and 21 are targeted, it is possible to realize an operation such as FTP (File Transfer Protocol) transfer between the network camera 1 and a terminal connected from the outside via the Internet 6. is there.

  Here, the global IP address used by the network camera 1 is assigned when the modem 4 connects to the Internet 6, but a new global IP address is assigned when the connection is once terminated and reconnected. Alternatively, the global IP address assigned every predetermined time may change. That is, the assigned global IP address is not fixed but dynamically changes.

  The modem 4 is a device necessary for a network device such as the network camera 1 and the computer device 2 to perform data communication via the Internet 6 by using an assigned global IP address. Various devices such as ADSL and FTTH are used. It has a function to perform data communication by the method.

  The mobile phone 8 is connected to the network camera 1 via the Internet 6 to be authenticated and used to view video and audio captured by the network camera 1.

  In the mobile phone 8, unique information (hereinafter referred to as terminal identification information) capable of identifying each terminal such as ID information for identifying a contractor of each terminal or a serial number of each terminal is stored and set. ing. This terminal identification information is stored and set in the mobile phone 8 when contracted with a mobile phone company for using the mobile phone 8 or at the manufacturing stage of the mobile phone 8, and is set or changed by the user. It is not possible. And the terminal identification information of the mobile phone 8 using the Internet 6 can be acquired by using communication such as HTTP (HyperText Transfer Protocol). By using this, the DDNS server 7 or the like can acquire the terminal identification information of the mobile phone 8 connected to itself.

  The DDNS server 7 has a function of assigning a subdomain name to a global IP address used by the network camera 1. As a result, it is possible to use an address including a subdomain name instead of an IP address that is a list of numerical values to connect to the network camera 1 from the outside. The DDNS server 7 has a function of acquiring terminal identification information from the mobile phone 8 used for viewing video and audio captured by the user with the network camera 1 and notifying the network camera 1 of the terminal identification information. Yes. Thereby, the network camera 1 can perform connection authentication of the mobile phone 8 using the terminal identification information. Details of these functions and operations will be described later.

  Next, the operation of the video distribution system shown in FIG. 1 will be described.

  First, a user of the network camera 1 connects to a predetermined DDNS server 7 by using a mobile phone 8 that is used for viewing video and audio captured by the network camera 1. Information relating to the DDNS server 7 address and user ID and password necessary for connection authentication required at this time are notified to the user by, for example, packaging a printed matter on which the information is printed at the manufacturing stage of the network camera 1. do it.

  The DDNS server 7 obtains the terminal identification information of the mobile phone 8 of the connecting user and requests the user to input a serial number that is device identification information of the network camera 1 to be used. The input serial number and the acquired terminal identification information are stored and managed in association with each other.

  Note that the serial number acquisition method is not limited to the above-described mode. For example, a serial number may be input as a user ID or password used for connection authentication to the DDNS server 7 and the serial number may be acquired at the connection authentication stage. Alternatively, the serial number of the network camera 1 of the user who requests connection to the address may be specified by using the subdomain name of the address when connecting to the DDNS server 7 as the serial number.

  At this time, the router 3 and the modem 4 are connected to the Internet 6, and the router 3 is in a state where a global IP address is assigned.

  When the network camera 1 is connected to the router 3, a private IP address is assigned to the network camera 1 by the DHCP function of the router 3.

  Next, the network camera 1 automatically starts setting the port forward function of the router 3 at a predetermined timing using the UPnP function. Specifically, the connection to the port number 80 of the router 3 using the global IP address is set to be transferred to the private IP address assigned to the network camera 1. As a result, the network camera 1 can operate on the Internet 6 as a Web server by using the global IP address assigned to the router 3. In addition, about the setting which concerns on the port forward function of the router 3, the aspect which sets similarly about other port numbers, for example, 20 and 21, etc., may be sufficient. Further, when the network camera 1 is connected to the Internet 6 without going through the router 3, the operation related to the setting of the port forwarding function described above is not performed, and the global IP address assigned to itself is recognized and described later The operation related to the subdomain name assignment request to the DDNS server 7 is started.

  In this state, in order to connect to the network camera 1 from the mobile phone 8 or the like and view the captured video and audio, it is necessary to designate a global IP address that is an enumeration of numbers. Therefore, the network camera 1 starts connection to the DDNS server 7 via the Internet 6 so that a domain name can be assigned to this global IP address.

  Information for connecting to the DDNS server 7 is set in advance in the network camera 1 at the manufacturing stage. Specifically, the information includes the address of the DDNS server 7, information necessary for connection authentication, and the like, and the network camera 1 uses the information to connect to the DDNS server 7 with authentication, Data transmission / reception and subdomain name assignment requests can be made.

  When the network camera 1 completes the setting of the port forward function of the router 3 and recognizes that the global IP address can be used, the network camera 1 then uses the network as the global IP address and its own device identification information. The serial number assigned to each camera 1 is notified to the DDNS server 7 via the Internet 6 to request assignment of a domain name.

  The device identification information may be information other than the serial number, such as a MAC address, as long as it is unique information of each network camera 1. However, since the device identification information and the terminal identification information are associated with each other and the mobile phone 8 connected to each network camera 1 is managed, the device identification information to be used and the mobile phone 8 are first used to connect to the DDNS server 7. The information input by the connected user must be the same.

  When the DDNS server 7 receives the serial number and the global IP address from the network camera 1, it assigns a domain name to the global IP address. Specifically, for example, when the DDNS server 7 has a domain name “XXX.co.jp”, if the serial number of the network camera 1 that has requested the setting of the domain name is mcs0001 Then, the subdomain name mcs0001 is assigned, and the address “mcs0001.xxx.co.jp” is associated with the global IP address of the network camera 1 and managed.

  At this time, the DDNS server 7 uses the mobile phone used by the user of the network camera 1 based on the correspondence between the serial number received from the network camera 1 and the serial number previously connected and input by the user through the mobile phone 8. 8 terminal identification information is specified. Then, the serial number, global IP address, and subdomain name of the network camera 7 and the terminal identification information of the mobile phone 8 are managed in association with each other.

  When the setting of the subdomain name is completed, the DDNS server 7 transmits data for notifying the completion of the setting to the network camera 1. At this time, the DDNS server 7 transmits the data including the terminal identification information of the mobile phone 8 of the user of the network camera 1 acquired previously in addition to the content for notifying the completion of the setting.

  The network camera 1 that has received the data notifying the completion of setting recognizes that the assignment of the subdomain name to its own global IP address is completed, and extracts terminal identification information from the received data. This is stored and managed together with its own serial number, private IP address, global IP address, subdomain name, and the like.

  Here, with respect to a method for notifying the user of the completion of the setting of the subdomain name or the like, for example, the network camera 1 has its own liquid crystal display device at a predetermined timing such as when the above operation is completed Or an LED lamp (not shown) may be used. Alternatively, when the user connects to the DDNS server 7 with the mobile phone 8 first, the user inputs the e-mail address, and the network camera 1 notified of the DDNS server 7 or the e-mail address responds to the e-mail address. It is also possible to perform by sending an e-mail.

  In addition, the method for the DDNS server 7 to recognize the global IP address of the network camera 1 is not limited to the mode of transmitting the global IP address from the network camera 1 as described above. Specifically, the global IP address is not explicitly transmitted from the network camera 1, and the DDNS server 7 analyzes the data including the serial number transmitted from the network camera 1 and is included therein. A mode in which a global IP address is extracted and used may be used.

  The user who recognizes that the above settings have been completed is not a global IP address that is a numerical list, but a character string “http://mcs0001.XXX.co.jp” as the address of the network camera 1. It is possible to specify an easy-to-understand address using etc. That is, the user can connect to the network camera 1 by inputting the serial number of the network camera 1 as the subdomain name in addition to the predetermined domain name.

  The global IP address assigned to the router 3 via the modem 4 may be dynamically changed as described above. The network camera 1 sends information such as a global IP address to the DDNS server 7 every predetermined time. When the network camera 1 recognizes that the global IP address assigned to the router 3 has been changed, it manages it internally. The contents of the existing global IP address are changed, and the serial number and the changed global IP address are transmitted to the DDNS server 7. As a result, the global IP address corresponding to the managed serial number is also changed in the DDNS server 7. At this time, the network camera 1 also sets the port forward function of the router 3 as described above if necessary.

  At this time, the network camera 1 transmits the subdomain name instead of the serial number to the DDNS server 7 together with the changed global IP address, and requests the change of the global IP address corresponding to the subdomain name. You may be the aspect to do. Alternatively, only the serial number or the subdomain name is transmitted, and the DDNS server 7 that receives the serial number recognizes the change of the global IP address from the global IP address obtained by analyzing the received data, and changes the setting. It may be an aspect.

  Thus, even when the global IP address is changed, the change is automatically reflected in the setting of the DDNS server 7 without any operation by the user. Therefore, even in an environment where the global IP address is dynamically changed, the user can easily connect to the network camera 1 by using an address made up of a domain name.

  Further, when the private IP address assigned to itself is changed by the router 3 or the like, the network camera 1 that has recognized this changes the setting of the port forward function of the router 3 and a connection request from the Internet 6 is made. The network camera 1 is correctly processed.

  Thus, even when the private IP address is changed, the change is automatically reflected in the setting of the router 3 without any operation by the user. Therefore, the user can easily connect to the network camera 1 using an address made up of a domain name.

  In this way, all the operations from the setting relating to the port forward function of the router 3 to the acquisition of the domain name in the DDNS server 7 are automatically performed only by connecting the network camera 1 to the router 3. The user can connect to the network camera 1 via the Internet 6 simply by connecting the network camera 1 and specifying an address including the serial number of the network camera 1 in the subdomain name.

  When the user uses the mobile phone 8 to specify an address including a subdomain name and connect to the network camera 1, the network camera 1 acquires the terminal identification information of the mobile phone 8. Then, the captured video and audio are not distributed to the mobile phone 8 that does not match the terminal identification information that has been received from the DDNS server 7 and stored and managed internally. That is, connection authentication using the terminal identification information of the mobile phone 8 used for connection is performed for a user who requests viewing of video and audio.

  Thereby, only the user who connects to the network camera 1 using the mobile phone 8 previously connected to the DDNS server 7 can use the network camera 1 on the web browser of the mobile phone 8 by the server function of the network camera 1. The captured video and audio can be displayed and viewed.

  In this way, just by connecting the user to the DDNS server 7 using the mobile phone 8, the terminal identification information is acquired by the DDNS server 7, and the terminal identification information is included in the subdomain name setting completion notification. Therefore, it is not necessary to separately communicate only for acquiring the terminal identification information between the network camera 1 and the DDNS server 7. That is, it is possible to perform settings for performing connection authentication of the mobile phone 8 using the terminal identification information by the network camera 1 with only the minimum necessary communication.

  Further, since this connection authentication is automatically performed only by connecting using the mobile phone 8, it is not necessary for the user to input a user ID or password, and connection authentication can be easily received.

  Further, in order to perform authentication using terminal identification information that is unique to each mobile phone 8, even if there is a third party who tries to connect by obtaining or guessing the address of the network camera 1 including the subdomain name, Unless the network camera 1 uses the mobile phone 8 having terminal identification information stored therein, the captured video and audio cannot be viewed, and high security can be realized.

  The setting of the terminal identification information of the mobile phone 8 to the network camera 1 is not limited to the mode performed via the DDNS server 7 as described above.

  For example, when the user connects the network camera 1 to the router 3 without connecting to the DDNS server 7 by the mobile phone 8, the network camera 1 sets the port forward function related to the router 3 as described above. Also, an operation related to a subdomain name assignment request to the DDNS server 7 is performed. When these operations are completed and the user uses the mobile phone 8 to specify the address including the subdomain name and connect to the network camera 1, the network camera 1 is connected to the mobile phone 8 to be connected. While acquiring terminal identification information, the screen which prompts input of user ID and a password on the display apparatus of the mobile telephone 8 is displayed. Then, when the user inputs a predetermined user ID and password described in the printed matter bundled at the manufacturing stage described above, the network camera 1 recognizes the connected mobile phone 8 as the user, The acquired terminal identification information is stored and managed internally. Thereafter, connection authentication using the terminal identification information is performed as described above.

  However, the network camera 1 performs the connection authentication by the user ID and the password in this state, although the assignment of the subdomain name is completed in the DDNS server 7, but the terminal identification information is not transmitted from the DDNS server 7. Only when there is. When terminal identification information is acquired after performing authentication with the user ID and password, authentication using the terminal identification information is performed thereafter.

  As a result, the terminal identification information can be acquired for the mobile phone 8 of the user connected to the network camera 1 without connecting to the DDNS server 7, and connection authentication using this can be performed. In addition, as in the past, by limiting the opportunity to authenticate only with a user ID and password including the possibility of information leakage, and in principle, only a specific mobile phone 8 can be connected, thereby realizing higher security than before can do.

  The mobile phone 8 connected to the network camera 1 is managed by the terminal identification information as described above, but the terminal identification information permitting connection can be changed or additionally registered.

  For example, the user connects to the network camera 1 using the mobile phone 8 in which the terminal identification information is registered, and instructs the network camera 1 to change registration or add registration. Receiving this, the network camera 1 notifies the user of a user ID and password that are valid for a predetermined period. The user connects to the network camera 1 using the mobile phone 8 to be changed or additionally registered within a predetermined period, and is authenticated using the user ID and password. The network camera 1 recognizes that the mobile phone 8 connected by using the corresponding user ID and password within a predetermined period is a terminal to be changed or additionally registered, and changes or adds to the terminal identification information stored and managed inside Register. Thereafter, the user can receive connection authentication using the terminal identification information as described above by using the mobile phone 8 that has been changed or additionally registered.

  Note that if the mobile phone 8 is lost, or if the user wishes to use the new mobile phone 8 without being authenticated using the terminal identification information registered in the network camera 1, the network camera 1 is disconnected from the Internet 6. Then, after initializing all the settings of the network camera 1, the operation such as connection with the above-described DDNS server 7 may be performed again from the beginning by using the new mobile phone 8.

  In this way, when changing or adding terminal identification information, it is instructed from the mobile phone 8 having already registered terminal identification information, and only by a user ID and password including the possibility of information leakage as in the past. By limiting the opportunities for authentication, high security can be maintained.

  The network camera 1 may be configured to perform authentication using a user ID and a password in addition to the connection authentication using the terminal identification information described above. For example, a printout in which a predetermined user ID and password set in advance are printed is bundled in the manufacturing stage of the network camera 1 and authentication using the terminal identification information is performed as described above, and then the user ID is further added. In addition, connection authentication may be performed by requesting input of a password.

  Information necessary for connection authentication to the DDNS server 7 described above and information such as a user ID and password necessary for connection authentication can be presented to the user who is the owner of the network camera 1 in addition to the mode of using the printed matter. As long as it is a method, other methods, such as an aspect stored in the network camera 1 and presented to the user using a display device or the like provided in the network 1, may be used. These information can be changed by a user who operates the computer device 2 or the mobile phone 8 and connects to the network camera 1. Thereby, it is possible to change the DDNS server 7 to be used, and security for connection to the network camera 1 can be enhanced by periodically changing the user ID and password.

  In this way, in addition to authentication using the terminal identification information, if authentication using a user ID or password is further performed, even if the user loses the mobile phone 8, for example, the third It is possible to avoid viewing video and audio captured by the network camera 1 by a person.

  As described above, if the connection authentication for the network camera 1 is performed using the terminal identification information of the mobile phone 8, high security can be realized. Further, it is not necessary to perform complicated settings for connection authentication, and connection authentication itself is automatically performed. Further, since it is possible to always connect to the network camera 1 using a simple subdomain name without performing any setting operation, the user can easily connect to the network camera while maintaining high security. The camera 1 can be used.

(Modification)
In the above-described embodiment, the terminal identification information of the mobile phone 8 is automatically acquired from the mobile phone 8 connected thereto by the DDNS server 7 or the network camera 1, but the present invention is not limited to this. It is not a thing.

  The terminal identification information cannot be set or changed by the user, but can be recognized by the user by operating the mobile phone 8 or the like. Therefore, a mode in which the terminal identification information is acquired by a user who has recognized the terminal identification information connected to the DDNS server 7 or the network camera 1 using the mobile phone 8 or the computer apparatus 2 and manually inputting the terminal identification information. It does not matter.

  Thereby, operations such as registration, change and addition of the terminal identification information of the mobile phone 8 are performed using the other mobile phone 8 or the computer device 2 without using the mobile phone 8 having the terminal identification information. Is possible.

  Moreover, although the DDNS server 7 showed the aspect which acquires the terminal identification information of the mobile telephone 8 in the said embodiment, this invention is not limited to this.

  Specifically, in the video distribution system, in addition to the DDNS server 7, a dedicated server (terminal identification server) that acquires the terminal identification information of the mobile phone 8 and notifies the network camera 1 of the acquired terminal identification information. May be provided independently.

  In this case, the user first connects to the dedicated server using the mobile phone 8 and inputs the serial number of the network camera 1 so that the dedicated server acquires the terminal identification information, and the serial number and Manage storage in association.

  When the network camera 1 transmits the serial number and the global IP address to the DDNS server 7 in the above embodiment, these are also transmitted to the dedicated server. Thus, the dedicated server uses the terminal identification information of the mobile phone 8 used by the user of the network camera 1 based on the correspondence between the received serial number and the serial number previously connected and input by the user using the mobile phone 8. Can be identified and sent to the global IP address that received it.

  Alternatively, the network camera 1 transmits the serial number and the global IP address only to the DDNS server 7 as described in the above embodiment, and the DDNS server 7 transmits these pieces of information to the dedicated server. It may be an aspect.

  Operations other than obtaining the terminal identification information of the mobile phone 8 using the dedicated server and transmitting the serial number and global IP address transmitted from the network camera 1 to the dedicated server are the same as those in the above embodiment. In the same manner as described above, the same effect can be obtained even in a video distribution system including a dedicated server, unlike the above embodiment.

  Thus, by providing an independent dedicated server that performs operations related to terminal identification information, the video distribution system of the present invention can be realized with only minimal changes to the system using the conventional DDNS server 7. .

It is a figure which shows the structure of the video delivery system which concerns on one embodiment of this invention.

Explanation of symbols

1 Network camera 1
3 Router 4 Modem 6 Internet 7 DDNS Server 8 Mobile Phone

Claims (8)

A network camera that transmits its own device identification information and global IP address when connected to the network;
A mobile phone for viewing video captured by the network camera;
A subdomain name corresponding to the device identification information is assigned to the global IP address transmitted from the network camera, and the device identification information corresponding to the device identification information input by the connected mobile phone is transmitted. A DDNS server that transmits terminal identification information acquired from the mobile phone to the network camera;
With
The video distribution system, wherein the network camera performs connection authentication of the mobile phone using the terminal identification information transmitted from the DDNS server. The video distribution system according to claim 1,
The video distribution system, wherein the DDNS server includes the terminal identification information acquired from the mobile phone in data notifying the completion of assignment of the subdomain name. A network camera that transmits its own device identification information and global IP address when connected to the network;
A mobile phone for viewing video captured by the network camera;
When a subdomain name corresponding to the device identification information is assigned to the global IP address transmitted from the network camera, a DNS server,
A terminal identification server that transmits terminal identification information acquired from the mobile phone to the network camera that has transmitted the device identification information corresponding to the device identification information input by the connected mobile phone;
With
The video distribution system, wherein the network camera performs connection authentication of the mobile phone using the terminal identification information transmitted from the terminal identification server. A network camera that transmits its own device identification information and global IP address when connected to the network;
A mobile phone for viewing video captured by the network camera;
A DNS server that assigns a subdomain name corresponding to the device identification information to the global IP address transmitted from the network camera;
With
After the assignment of the subdomain name is completed, the network camera acquires terminal identification information from the mobile phone connected to the network camera and authenticated, and then uses the terminal identification information to A video distribution system characterized by performing connection authentication. The video distribution system according to any one of claims 1 to 4,
The video distribution system, wherein the network camera further performs connection authentication using a predetermined user ID and password after performing connection authentication using the terminal identification information. The video distribution system according to any one of claims 1 to 5,
When the network camera is connected to a router, the network camera sets a port forward function of the router. A network camera that distributes captured images,
A network camera characterized in that after the terminal identification information of a mobile phone that has been authenticated by connecting to the network camera is acquired, connection authentication of the mobile phone is performed using the terminal identification information. The network camera according to claim 7,
The video distribution system, wherein the network camera further performs connection authentication using a predetermined user ID and password after performing connection authentication using the terminal identification information.

Images